Cutenews Security Vulnerabilities and Issues — Cutenews CVE List

Lucene search

CutephpCutenews

2 matches found

CVE•added 2006/05/09 10:2 a.m.•52 views

CVE-2006-2249

Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) story, or (3) title parameters.

4.3CVSS5.9AI score0.09888EPSS

CVE•added 2006/05/09 10:2 a.m.•44 views

CVE-2006-2250

CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or (2) /inc/functions.inc.php, which reveal the path in an error message.

6.4CVSS6.2AI score0.00483EPSS